[sgbuffett]

A lot of flaws in the system.
1. How come sms can be spoofed to come from bank.
2. How is it token can just be shifted to another device without further authentication.
3. Hopeless hotline.
4. Where is the fraud detection mechanism to delay transfer?

I also have an account with another bank that wanted me to switch to digital token.

My thinking was that now it depends on phone security if phone is hacked everything is on a single device . Did the bank think through all the security issues associated with digital tokens?